+ Post New Thread
Results 1 to 11 of 11
Windows Thread, Cant create Mandatory profiles in Technical; I've had enough of our roaming profiles so want to setup mandatory profiles for our students. However I seem to ...
  1. #1

    Join Date
    Feb 2006
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Cant create Mandatory profiles

    I've had enough of our roaming profiles so want to setup mandatory profiles for our students.
    However I seem to have trouble doing this. I have to confess I relatively new to active directory but I think I’ve covered every base.

    Firstly I create a new user logged in and setup up everything the way I wanted. I then copied the profile I created to the server.
    I set the ntuser.dat to .man set in the profile path its location with the ntuser.man at the end.

    The problem is when ever I log on using various different test log ons it always creates an account on that pc for the user. Where as my understanding is the mandatory profile should not store settings. I've also tried a complete fresh account with to profile or log in scripts in a new OU and I've block inheritance.

    I could be just over looking things but I've been playing with it so long that perhaps I'm missing the obvious.
    Please help.

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,938
    Thank Post
    114
    Thanked 272 Times in 250 Posts
    Rep Power
    104

    Re: Cant create Mandatory profiles

    It will cache a copy locally still. For more info check out the guide on the wiki written by one of our members.

    http://www.russdev.com/edugeek/doku.php?id=profiles

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Cant create Mandatory profiles

    It will cache a copy locally still.
    You can disable that in Group Policies.

    Computer Configuration -> Admin Templates -> System -> User Profiles -> Delete cached copies of roaming profiles.

    Remeber to disable slow link detection too, otherwise bad things happen.

  4. #4

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,192
    Thank Post
    53
    Thanked 270 Times in 178 Posts
    Rep Power
    131

    Re: Cant create Mandatory profiles

    Quote Originally Posted by Geoff
    It will cache a copy locally still.
    Remeber to disable slow link detection too, otherwise bad things happen.
    Do you do that by setting "Do Not Detect Slow Network Link" to Enabled?

    I think we've seen the "bad things" from this - I moved the user areas to a different server and random machines were still looking for the old location - presumably from the local cached profiles - so we'll see how it goes post-Easter.

  5. #5

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,540
    Thank Post
    831
    Thanked 609 Times in 412 Posts
    Rep Power
    432

    Re: Cant create Mandatory profiles

    IIRC you need to set the "Dont Cache Roaming Profiles" on the Client's Local Group Policy

  6. #6
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    33

    Re: Cant create Mandatory profiles

    Quote Originally Posted by spike
    I then copied the profile I created to the server.
    I set the ntuser.dat to .man set in the profile path its location with the ntuser.man at the end.
    How did you copy the profile? If you just dragged the files using Explorer, then the permissions in the user registry will be wrong. You need to use the copy profile function from My computer, Properties, Advanced, User Profiles Settings, (select the profile), Copy To.

  7. #7
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,946
    Thank Post
    235
    Thanked 48 Times in 44 Posts
    Blog Entries
    2
    Rep Power
    45

    Re: Cant create Mandatory profiles

    Greetings Profile master :P

    So are the registry settings in that profile then ajb? Once created you could then just copy the folder to other machines?


    Added a couple of questions to the wiki too:

    What sort of user should MPM be? - I would assume a standard student user, but MPM needs to have local admin rights to make settings to enable some programs run. [I copy a local profile with admin rights across to default to achieve this - is that a problem?]

    Does the local profile take precedence over any central profile? - If I set a local proxy for example, it overrides server Group Policy settings.

  8. #8
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    33

    Re: Cant create Mandatory profiles

    Registry permissions are somehow embedded withing the NTUSER.MAN file. They are NOT the permissions ON the NTUSER.MAN file. The permissions can be set correctly automatically by using the Copy To function in the Windows User Profiles GUI, which sets file permissions AND registry permissions.

    It is possible to edit the registry permissions with REGEDIT on XP, BUT, it's not as simple as giving Full Access to EVERYONE. If you examine the permissions on a pukka user profile carefully, you will find that the owner of the profile does not necessarily have full access to all areas of it. The Policies section is one example where the System can write to but the user cannot.

    My advice: Always use the Copy To function. When copying a profile for use as a mandatory profile for multiple users, I typically assign permissions to Everyone.

    PS - I will look at the Wiki questions when I get chance. Got to go shopping now aargggghh.....

  9. #9
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    33

    Re: Cant create Mandatory profiles

    @mark: I have added my two cents to the questions no the Wiki.

  10. #10
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,946
    Thank Post
    235
    Thanked 48 Times in 44 Posts
    Blog Entries
    2
    Rep Power
    45

    Re: Cant create Mandatory profiles

    Excellent! Thanks ajb.

  11. #11

    Join Date
    Feb 2006
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Cant create Mandatory profiles

    Cheers for the responses.
    The copying of the profile from My computer, Properties, Advanced, User Profiles Settings with setting the permissions sorted it.
    Thanks

SHARE:
+ Post New Thread

Similar Threads

  1. Mandatory Profiles
    By jcollings in forum Wireless Networks
    Replies: 7
    Last Post: 9th September 2009, 03:36 PM
  2. Mandatory Profiles and Desktops
    By faza in forum Wireless Networks
    Replies: 14
    Last Post: 19th December 2007, 11:05 AM
  3. Outlook with Mandatory Profiles
    By Zoom7000 in forum Windows
    Replies: 10
    Last Post: 30th May 2007, 12:59 PM
  4. Mandatory Profiles and Macros
    By Midget in forum Windows
    Replies: 3
    Last Post: 24th January 2007, 05:07 PM
  5. Mandatory Profiles
    By HodgeHi in forum Windows
    Replies: 2
    Last Post: 6th December 2006, 11:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •